introvirt::windows::nt::OBJECT_HEADER Class Reference

Wrapper for the Windows OBJECT_HEADER structure. More...

#include <OBJECT_HEADER.hh>

Public Member Functions
virtual uint8_t	TypeIndex () const =0
	Get the index into the Type table.
virtual guest_ptr< void >	Body () const =0
virtual const OBJECT_HEADER_CREATOR_INFO &	CreatorInfo () const =0
	Get the creator information.
virtual const OBJECT_HEADER_HANDLE_INFO &	HandleInfo () const =0
	Get the handle information.
virtual const OBJECT_HEADER_NAME_INFO &	NameInfo () const =0
	Get the name information.
virtual const OBJECT_HEADER_PROCESS_INFO &	ProcessInfo () const =0
	Get the process information.
virtual const OBJECT_HEADER_QUOTA_INFO &	QuotaInfo () const =0
	Get the quota information.
virtual bool	has_creator_info () const =0
virtual bool	has_handle_info () const =0
virtual bool	has_name_info () const =0
virtual bool	has_process_info () const =0
virtual bool	has_quota_info () const =0
virtual ObjectType	type () const =0
virtual guest_ptr< void >	ptr () const =0
virtual	~OBJECT_HEADER ()=default

Static Public Member Functions
static std::unique_ptr< OBJECT_HEADER >	make_unique (const NtKernel &kernel, const guest_ptr< void > &ptr)

Detailed Description

Wrapper for the Windows OBJECT_HEADER structure.

Windows' kernel objects are prefixed with an OBJECT_HEADER. The HANDLE_TABLE stores references to OBJECT_HEADERs, from which we can get the actual object.

Constructor & Destructor Documentation

~OBJECT_HEADER()

virtual introvirt::windows::nt::OBJECT_HEADER::~OBJECT_HEADER ( )

virtualdefault

Member Function Documentation

Body()

virtual guest_ptr< void > introvirt::windows::nt::OBJECT_HEADER::Body ( ) const

pure virtual

Returns

The guest address of the object that comes after the header

CreatorInfo()

virtual const OBJECT_HEADER_CREATOR_INFO & introvirt::windows::nt::OBJECT_HEADER::CreatorInfo ( ) const

pure virtual

Get the creator information.

Returns

The creator information

Exceptions

InvalidMethodException

if not available

HandleInfo()

virtual const OBJECT_HEADER_HANDLE_INFO & introvirt::windows::nt::OBJECT_HEADER::HandleInfo ( ) const

pure virtual

Get the handle information.

Returns

The handle information

Exceptions

InvalidMethodException

if not available

has_creator_info()

virtual bool introvirt::windows::nt::OBJECT_HEADER::has_creator_info ( ) const

pure virtual

Returns

True if creator information is available

has_handle_info()

virtual bool introvirt::windows::nt::OBJECT_HEADER::has_handle_info ( ) const

pure virtual

Returns

True if handle information is available

has_name_info()

virtual bool introvirt::windows::nt::OBJECT_HEADER::has_name_info ( ) const

pure virtual

Returns

True if name information is available

has_process_info()

virtual bool introvirt::windows::nt::OBJECT_HEADER::has_process_info ( ) const

pure virtual

Returns

True if process information is available

has_quota_info()

virtual bool introvirt::windows::nt::OBJECT_HEADER::has_quota_info ( ) const

pure virtual

Returns

True if quota information is available

make_unique()

static std::unique_ptr< OBJECT_HEADER > introvirt::windows::nt::OBJECT_HEADER::make_unique ( const NtKernel &  kernel, const guest_ptr< void > &  ptr  )

static

NameInfo()

virtual const OBJECT_HEADER_NAME_INFO & introvirt::windows::nt::OBJECT_HEADER::NameInfo ( ) const

pure virtual

Get the name information.

Returns

The name information

Exceptions

InvalidMethodException

if not available

ProcessInfo()

virtual const OBJECT_HEADER_PROCESS_INFO & introvirt::windows::nt::OBJECT_HEADER::ProcessInfo ( ) const

pure virtual

Get the process information.

Returns

The process information

Exceptions

InvalidMethodException

if not available

ptr()

virtual guest_ptr< void > introvirt::windows::nt::OBJECT_HEADER::ptr ( ) const

pure virtual

Returns

The virtual address of the OBJECT_HEADER

QuotaInfo()

virtual const OBJECT_HEADER_QUOTA_INFO & introvirt::windows::nt::OBJECT_HEADER::QuotaInfo ( ) const

pure virtual

Get the quota information.

Returns

The quota information

Exceptions

InvalidMethodException

if not available

type()

virtual ObjectType introvirt::windows::nt::OBJECT_HEADER::type ( ) const

pure virtual

Returns

The type of object being referred to

TypeIndex()

virtual uint8_t introvirt::windows::nt::OBJECT_HEADER::TypeIndex ( ) const

pure virtual

Get the index into the Type table.

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/types/objects/OBJECT_HEADER.hh